Configure Renovate - autoclosed

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

📚 See our Reading List for relevant documentation you may be interested in reading.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

Detected Package Files

• .github/actions/pulumi-setup/action.yml (github-actions)
• .github/actions/setup/action.yml (github-actions)
• .github/workflows/ci.yml (github-actions)
• .github/workflows/eval.yml (github-actions)
• .github/workflows/iac-deploy.yml (github-actions)
• .github/workflows/iac-drift.yml (github-actions)
• .github/workflows/release-reusable.yml (github-actions)
• .github/workflows/scorecard.yml (github-actions)
• .github/workflows/security-analysis.yml (github-actions)
• .github/workflows/static-analysis.yml (github-actions)
• .node-version (nodenv)
• infra/package.json (npm)
• package.json (npm)
• packages/oxc-config/package.json (npm)
• packages/skills/package.json (npm)
• packages/tsconfig/package.json (npm)
• packages/vitest-config/package.json (npm)
• pnpm-workspace.yaml (npm)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Hopefully safe environment variables to allow users to configure.
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Show only the Age and Confidence Merge Confidence badges for pull requests.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Ensure that every dependency pinned by digest and sourced from Forgejo contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from Gitea contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from GitHub.com and Github enterprise contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from GitLab.com contains a link to the commit-to-commit diff
• Correctly link to the source code for golang.org/x packages
• Link to pkg.go.dev/... for golang.org/x packages' title
• Provide a link to octochangelog's improved breakdown for Renovate's changelogs

---

What to Expect

With your current configuration, Renovate will create 6 Pull Requests:

Update actions/checkout action to v6.0.3

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-6.x
• Merge into: main
• Upgrade actions/checkout to df4cb1c069e1874edd31b4311f1884172cec0e10

Update github/codeql-action action to v4.36.1

• Schedule: ["at any time"]
• Branch name: renovate/github-codeql-action-4.x
• Merge into: main
• Upgrade github/codeql-action to 87557b9c84dde89fdd9b10e88954ac2f4248e463

Update pnpm to v11.5.1

• Schedule: ["at any time"]
• Branch name: renovate/pnpm-11.x
• Merge into: main
• Upgrade pnpm to 11.5.1

Update trufflesecurity/trufflehog action to v3.95.5

• Schedule: ["at any time"]
• Branch name: renovate/trufflesecurity-trufflehog-3.x
• Merge into: main
• Upgrade trufflesecurity/trufflehog to d411fff7b8879a62509f3fa98c07f247ac089a51

Update changesets/action action to v1.9.0

• Schedule: ["at any time"]
• Branch name: renovate/changesets-action-1.x
• Merge into: main
• Upgrade changesets/action to a45c4d594aa4e2c509dc14a9f2b3b67ba3780d0d

Update Node.js to v24.16.0

• Schedule: ["at any time"]
• Branch name: renovate/node-24.x
• Merge into: main
• Upgrade node to 24.16.0

🚸 PR creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prHourlyLimit for details.

---

Warning

Please correct - or verify that you can safely ignore - these dependency lookup failures before you merge this PR.

• Could not determine new digest for update (github-tags package actions/checkout)
• Could not determine new digest for update (github-tags package pnpm/action-setup)
• Could not determine new digest for update (github-tags package actions/setup-node)
• Could not determine new digest for update (github-tags package actions/upload-artifact)
• Could not determine new digest for update (github-tags package pulumi/actions)
• Could not determine new digest for update (github-tags package actions/create-github-app-token)
• Could not determine new digest for update (github-tags package changesets/action)

Files affected: .github/actions/pulumi-setup/action.yml, .github/actions/setup/action.yml, .github/workflows/ci.yml, .github/workflows/eval.yml, .github/workflows/iac-deploy.yml, .github/workflows/iac-drift.yml, .github/workflows/release-reusable.yml, .github/workflows/scorecard.yml, .github/workflows/security-analysis.yml, .github/workflows/static-analysis.yml

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 94607a6

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR